Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-34195

GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
imaginationtech

Description

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Imagination Technologies Graphics DDK

Default version status: unknown

  • 1.18 RTMunaffected
  • 23.2 RTMunaffected
  • 24.2 RTMaffected
  • 25.1 RTM to ≤ 25.3 RTMaffected
  • 26.1 RTMunaffected
  • 26.2 RTMunaffected

References